NIST SP 800-53
The federal control catalog nearly every other US regime tailors from — the common ancestor of FedRAMP, CMMC, ARC-AMPE, and most crosswalks.
Rev. 5, Release 5.2.0 · NIST Computer Security Resource Center · published 2025-08-27
01Standing
Named, with the authority's acquisition path recorded; onboarding is refused until a control set is registered.
NIST SP 800-53 cannot be onboarded yet: Freely published; OSCAL catalog not yet ingested into data/. Onboarding is enabled once a control set is registered, so a new project never opens into an empty workspace.
NIST SP 800-53 cannot be onboarded yet: Freely published; OSCAL catalog not yet ingested into data/. Onboarding is enabled once a control set is registered, so a new project never opens into an empty workspace.
02Registry record
- Registry status
- Roadmap · modelledWe model the regime — control families and at least one crosswalk map on disk — but no control catalog is ingested.
- Control units
- Not on record — no catalog ingested and no authority-published count cited.
- Control families
- AC · AU · CM · IA · IR · RA · SC · SI
- Applies to
- federal · critical infrastructure · technology · US · global
- Verification
- Secondary — corroborated across independent sources; the authority blocks automated fetch or does not state it plainly. checked 2026-08-06
03Version ledger
| Rev. 4 | Superseded | 2013-04-30 |
| Rev. 5, Release 5.1.1 | Superseded · supersedes Rev. 4 | date not published |
| Rev. 5, Release 5.2.0 | Current edition · supersedes Rev. 5, Release 5.1.1 | 2025-08-27 |